Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
File:                     LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json)
Hash identifier:          mYsHRnuN2sND7teKZSqI2KDuDz/G2NCcgDT00PLDTUA=
Subject key identifier:   82:06:31:32:D7:4A:C8:A3:9A:EA:D0:B4:6E:6E:E6:61:C5:1A:75:D6
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Certificate issuer:       /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial:       01A0CCD9E1446FF273A6A90F41E3CB9B9AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
Manifest number:          14C0
Signing time:             Wed 23 Sep 2026 06:00:26 +0000
Manifest this update:     Wed 23 Sep 2026 06:00:26 +0000
Manifest next update:     Thu 24 Sep 2026 06:00:26 +0000
Files and hashes:         1: D_MvgtM2FfrwIDXfPwh28d1QTzc.roa (hash: 8CgFzSpAPPwSSiKVfDGvcTacC5XDOPUob1Tjfelo/es=)
                          2: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: kfpcyKcErSXJWXJ5ILU4HYfktcQ1YaOVWAIp9JGRYQo=)
                          3: Mdk2rGO_DVEGin1GNTSly2AoZK4.roa (hash: iLFOQXgOcjprFdT2TgsrTO7NFGOS4V7YveXSXGEQwjc=)
                          4: MnysfPyo4atkz89bty1U8O9Gpxk.roa (hash: j0Rn3Q7Gpb1iUDxURvHQTFFvAHFS3dyzvh6jFQiBkzw=)
                          5: _R9ozOhjsnXdveB9O93LpJsoaN4.roa (hash: FgeHnK3aQkxgbjIxN0SaKLGGPBqXK9ZTQrdZ1bFtpBc=)
                          6: lJEK2wbu8Pc44xMVy_2F9NkPoOc.roa (hash: yCqV9CveQ3I/La4XQi3SB7lzAcfXNyhSLbR+Fcpl5/g=)
                          7: yL0FdcxXP9eNvZYj4E60TDMQXgU.roa (hash: Xyn3k5mkiJ79FDH1bRu/Tkqax3eUA/J4aT2yU7VGK18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:d9:e1:44:6f:f2:73:a6:a9:0f:41:e3:cb:9b:9a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
        Validity
            Not Before: Sep 23 06:00:26 2026 GMT
            Not After : Sep 24 06:00:26 2026 GMT
        Subject: CN=82063132d74ac8a39aead0b46e6ee661c51a75d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:42:2a:ce:2d:fb:fa:8b:32:70:81:8c:10:
                    15:6e:84:0d:2b:cd:8d:5b:61:5d:c1:09:c5:2c:ee:
                    3d:7d:8b:20:b7:48:ff:26:cc:ce:3f:c1:26:aa:f2:
                    3b:41:0d:bf:75:c3:de:8e:97:af:2e:0d:7c:ee:e6:
                    d8:f2:e8:7f:6e:b6:ff:51:cd:49:5b:2c:84:0a:63:
                    79:d0:92:10:7c:8b:61:fd:cb:90:69:bf:95:82:5b:
                    88:b6:0f:35:eb:04:6a:4d:8d:15:d0:12:ee:c0:ce:
                    08:b3:dd:1f:34:f2:15:a0:ba:5b:43:f2:f1:50:02:
                    4c:03:0d:0f:a7:a4:d9:0a:b6:45:e7:86:37:fa:80:
                    62:02:04:5f:9a:85:0c:7f:2b:d2:58:59:ca:c9:7f:
                    b0:e0:a0:09:14:04:e9:1f:1b:5e:45:b5:8d:e0:fa:
                    29:ea:91:38:1f:c8:42:37:9b:33:a3:e9:1a:8b:5a:
                    0c:f4:d9:17:93:c9:05:2c:42:aa:02:78:1e:33:9b:
                    ea:df:6e:88:98:b8:f8:fd:5f:5c:79:37:d9:5b:ca:
                    25:a6:46:e5:77:a7:40:58:c4:af:82:7c:50:1b:67:
                    27:bf:a4:ea:7c:46:80:3a:03:e2:13:68:a4:99:27:
                    05:1d:3f:37:d4:36:b9:dd:c7:f4:b1:c7:ea:bc:56:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:06:31:32:D7:4A:C8:A3:9A:EA:D0:B4:6E:6E:E6:61:C5:1A:75:D6
            X509v3 Authority Key Identifier:
                keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a5:a6:f2:e3:7b:fb:56:ac:03:17:d1:e8:6e:ae:9a:6e:be:
         52:3a:e8:4a:ff:2d:e2:be:79:54:d4:18:a4:9e:0b:d0:64:33:
         75:d6:a0:ef:ba:0f:33:26:94:13:bd:16:5d:3e:1d:8c:f3:31:
         12:d6:5e:7d:6e:2a:f8:ae:09:b1:b1:bd:ea:c5:24:bf:2f:95:
         ea:65:52:de:24:4b:84:96:07:5e:59:1f:ae:17:01:3e:60:d7:
         c1:6a:c2:2b:3a:61:e7:1f:8c:84:85:8e:61:ce:5b:4c:56:06:
         0f:ed:21:f9:3f:78:30:63:55:54:97:18:ff:08:e9:75:69:d7:
         4a:78:a3:e4:8c:78:86:a0:7d:66:ef:5c:25:9a:b1:cf:11:e0:
         a5:14:fd:f9:ae:11:5e:71:18:33:56:9d:95:52:10:21:a2:6f:
         13:00:6d:5c:21:36:62:a8:f5:0b:05:a0:a1:71:3a:ca:9c:07:
         90:98:e2:59:5b:a7:9c:c1:1f:f0:ec:83:22:e7:cf:7e:27:03:
         d7:ba:c2:46:9b:b8:64:a1:f3:8f:82:09:9a:f2:ac:5a:48:0d:
         bc:7e:54:7b:74:63:61:a1:10:ba:fd:cf:57:01:b0:33:63:a8:
         7a:57:c8:dc:95:4a:76:d3:18:91:2c:8c:7c:63:61:27:e5:cf:
         7a:31:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:48:01 2026 by rpki-client